WordPress Plugin Vulnerabilities

Real Estate Manager – Property Listing and Agent Management <= 7.3 - CAPTCHA Bypass

Description

The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to CAPTCHA Bypass in all versions up to, and including, 7.3. This makes it possible for unauthenticated attackers to bypass CAPTCHA.

Affects Plugins

Plugin icon
real-estate-manager
No known fix

References

CVE
CVE-2025-22645
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/37e47649-3e58-475d-93ba-db9862a67f22

Miscellaneous

Original Researcher
Marek Mikita
Verified
No
WPVDB ID
ba230c30-6370-4d3e-949d-e842c703d9b5

Timeline

Publicly Published
2025-02-03 (about 1 year ago)
Added
2025-02-26 (about 1 year ago)
Last Updated
2025-02-26 (about 1 year ago)

Other

Published
Title
Published
2024-03-25
Title
Essential Addons for Elementor < 5.9.12 - Contributor+ Stored XSS
Published
2015-08-05
Title
WordPress <= 4.2.3 - Timing Side Channel Attack
Published
2014-08-01
Title
Method 2.1 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download
Published
2025-02-17
Title
Uncode < 2.9.1.7 - Unauthenticated Arbitrary File Read in uncode_admin_get_oembed
Published
2017-05-03
Title
WordPress 2.3-4.8.3 - Host Header Injection in Password Reset